CVE-2026-56129
Description
Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administrative privilege may access physical memory.
Summary dbcve.org
A Toshiba/Dynabook Windows kernel driver exposes IOCTL (I/O Control) interfaces that allow any logged-in user, regardless of privilege level, to read physical memory. The driver lacks proper access control checks on these IOCTL handlers, allowing a standard user to perform a privileged operation (physical memory access) that should be restricted to administrators or SYSTEM. This is a privilege boundary violation enabling local information disclosure.
Mitigation
Apply vendor-supplied patches for the Toshiba/Dynabook driver when available. Until patched, restrict physical access to trusted personnel only, as any local user can read arbitrary physical memory contents.